Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1005 Source: W3SVC

Source
Level
Description
The World Wide Web Publishing Service is exiting due to an error. The data field contains the error number.
Data:
0000: 34 05 07 80
Comments
 
Error code 0x80070553 - According to ME2283089, you may get this error in the following conditions:
- You have a computer that is running Windows Server 2003,
- You configure an application or service to run by using a hard-coded user account on the computer
- You run the application or service, and then you exit the application or service.
- You try to run the application or service again.

A hotfix is available for this particular situation, see the article for details.
Solution: Management of IIS, under Web Sites, check each Web Site properties in the "Operators" tab. Remove any operators that is identified as "Account Unknown".

Possibly due to deletion of some administrator account for someone who has left your organization.
(We are currently in the process of moving from NT 4.0 DOMAINS to Windows 2003 Server Active Directory - we were cleaning up the DOMAIN SAM database as part of the process)
The data section typically points to Error code 0x534. See the link for this error code.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...